$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json) Hash identifier: czSVXv2vpvyN5LqfaQu6tod2HiH0KCJH8qWdB89dTmM= Subject key identifier: 66:A4:6C:42:3A:AD:15:EE:A8:DE:5C:D6:DB:AF:5E:7E:E4:1B:98:10 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584DA3E562F2F3479F6EFE56CE00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 33392 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:62:f2:f3:47:9f:6e:fe:56:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=34e33464-24e9-44b9-8c8b-d7efbe9223b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:8f:b3:16:ad:98:f5:ab:5a:78:78:74:f2: 26:b8:27:c3:76:2d:b4:b7:8c:bd:63:10:08:d1:85: 81:53:73:cc:4c:ff:81:b0:df:46:54:1f:19:9b:70: ff:82:3b:30:10:ae:40:43:23:52:78:93:f1:24:f2: dd:7b:53:bc:70:74:b8:ba:8c:8c:da:25:b4:53:03: ed:ef:f8:49:2c:18:18:de:b5:1c:0e:76:fd:24:ba: 51:4f:a5:c9:d0:5d:85:03:b9:53:d5:2d:2d:7b:99: dd:92:b2:f2:3b:a8:b8:5a:cc:c8:20:88:6e:62:78: 2e:ac:ee:30:c2:c5:c9:be:2e:af:d6:f1:c7:77:6b: 61:14:40:a5:84:54:a6:a6:83:10:0c:da:94:69:7b: e0:8e:29:7e:0e:e1:89:21:f9:72:fc:70:1b:9d:6c: 34:07:37:e1:98:4b:91:c3:9f:f2:e3:d2:08:ce:95: ee:5c:72:f9:ec:60:a4:22:85:a0:44:fc:36:d6:f6: 30:e2:e2:f8:e2:18:a2:34:0d:9a:ee:b5:01:95:3e: dd:c5:c8:05:2c:d7:fa:c3:52:0d:f3:77:3e:a8:89: 3c:f7:3b:cc:25:53:7e:08:e0:b3:e6:ee:b3:d5:75: 4e:1a:a7:fe:6b:f9:8d:4e:85:0e:02:33:c9:21:92: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A4:6C:42:3A:AD:15:EE:A8:DE:5C:D6:DB:AF:5E:7E:E4:1B:98:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ba:0c:8f:a5:83:e6:dc:ef:a8:98:f7:b0:52:3f:f8:c2:6b: f5:6e:31:12:82:b7:20:90:86:48:52:0c:8b:80:6c:71:d5:18: 58:27:8f:e6:c5:96:2a:65:a8:95:1a:e1:d6:65:dc:f2:de:32: 7a:24:bd:45:37:3a:f4:59:97:3c:73:be:21:4e:43:c8:e6:9c: 56:84:aa:bd:17:d4:a4:1b:9d:b5:d2:e8:b8:c1:7a:26:12:42: 3c:c9:61:4f:6f:4d:ed:28:67:b8:01:5e:98:5d:f6:63:c1:e0: f2:94:73:3f:f3:56:b4:26:b8:70:90:2a:ff:2e:34:80:c1:7f: 53:56:65:46:c8:0d:65:d3:ea:22:1d:04:3e:e3:4f:c8:a9:73: fe:ea:4a:97:9f:5f:1f:67:68:1f:f8:1a:f9:ea:f4:a9:b1:48: 4d:08:9c:9e:c4:d2:fe:ec:c7:db:5a:bd:62:bf:9b:a1:d1:5d: 42:61:48:46:da:a9:a2:a9:eb:4e:b8:7d:7c:7f:5e:fa:95:57: ef:38:40:5e:ae:55:06:75:0c:32:3c:bf:e4:af:2b:08:47:7b: 7c:a6:d8:af:6c:87:b3:7b:63:c1:23:ac:a3:09:ed:9a:3f:e7: 27:30:17:cd:05:b5:9b:76:fc:62:77:e3:9d:9f:53:d3:93:db: 07:8b:36:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WLy80efbv5WzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk MzRlMzM0NjQtMjRlOS00NGI5LThjOGItZDdlZmJlOTIyM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgOPsxatmPWrWnh4dPImuCfDdi20t4y9YxAI 0YWBU3PMTP+BsN9GVB8Zm3D/gjswEK5AQyNSeJPxJPLde1O8cHS4uoyM2iW0UwPt 7/hJLBgY3rUcDnb9JLpRT6XJ0F2FA7lT1S0te5ndkrLyO6i4WszIIIhuYngurO4w wsXJvi6v1vHHd2thFEClhFSmpoMQDNqUaXvgjil+DuGJIfly/HAbnWw0BzfhmEuR w5/y49IIzpXuXHL57GCkIoWgRPw21vYw4uL44hiiNA2a7rUBlT7dxcgFLNf6w1IN 83c+qIk89zvMJVN+COCz5u6z1XVOGqf+a/mNToUOAjPJIZL7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGakbEI6rRXuqN5c1tuvXn7kG5gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDEyZjIxYmQtOGU4ZS0z MmQ3LThhN2ItMzczOGYzOGMzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW6DI+lg+bc76iY97BSP/jCa/VuMRKCtyCQhkhSDIuAbHHVGFgnj+bF liplqJUa4dZl3PLeMnokvUU3OvRZlzxzviFOQ8jmnFaEqr0X1KQbnbXS6LjBeiYS QjzJYU9vTe0oZ7gBXphd9mPB4PKUcz/zVrQmuHCQKv8uNIDBf1NWZUbIDWXT6iId BD7jT8ipc/7qSpefXx9naB/4Gvnq9KmxSE0InJ7E0v7sx9tavWK/m6HRXUJhSEba qaKp6064fXx/XvqVV+84QF6uVQZ1DDI8v+SvKwhHe3ym2K9sh7N7Y8EjrKMJ7Zo/ 5ycwF80FtZt2/GJ3452fU9OT2weLNkE= -----END CERTIFICATE-----Generated at Wed May 13 05:41:33 2026 by rpki-client